Vulnerability advisory
CVE-2021-45326
Also known as BIT-gitea-2021-45326GHSA-4wp3-8q92-mh8wGO-2022-0309
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/go-gitea/gitea ↗ | |
| All commits before 31a738b221094cbfc32bf342fb3b76d4e78617da | 31a738b221094cbfc32bf342fb3b76d4e78617da |
Also listed as affected (8)
| |
Description
Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.